By default, "custom boot objects" (created using kmutil create)
can't be used in macOS Virtualization framework guest VMs. Here I show
how to get around this Apple design flaw. Note that Virtualization
framework macOS guests can only be created on Apple Silicon Macs.
To proceed, you'll need to work through my Running Third Party Kernel Extensions on Virtualization Framework macOS Guest VMs. Many
| // RelocatePartition is a standalone utility for relocating the outer | |
| // Apple_APFS_Recovery GPT partition (RecoveryOSContainer) to the end of an | |
| // Apple Silicon macOS disk image so that the main Apple_APFS container can be | |
| // expanded into the freed space. | |
| // | |
| // Origin: | |
| // - Based on Cirrus Labs' recovery relocation logic from: | |
| // https://github.com/cirruslabs/packer-plugin-tart/blob/main/builder/tart/recoverypartition/relocate.go | |
| // | |
| // What this fork adds: |
| #!/bin/sh | |
| # https://gist.github.com/smoser/14df5f0cd621e10d2282d7c90345e322 | |
| # This is /etc/schroot/setup.d/91smoser | |
| # I use it to apply local updates to schroots. | |
| # make sure it is executable (chmod +x). | |
| # Things it does: | |
| # a.) sets proxy inside. If apt proxy is configured outside, it will | |
| # apply that inside. | |
| # b.) uses a portion of 'apt-go-fast' | |
| # https://gist.github.com/smoser/5823699/ |
| #!/bin/sh | |
| # https://gist.github.com/smoser/5823699 | |
| set -e | |
| [ "$(id -u)" = "0" ] && sudo="" || sudo="sudo" | |
| [ -e "/usr/bin/apt-get.distrib" ] || | |
| $sudo dpkg-divert --local --rename --add /usr/bin/apt-get | |
| $sudo tee /usr/bin/apt-get >/dev/null <<"EOF" | |
| #!/bin/sh |
Here are Apple-provided sources you can point at that show FSKit file system extensions are entitlement-gated and live in the "extension / system extension" world (not "just load a plugin"):
FSKit overview (Apple docs) --- explicitly says you deliver an FSKit module as an app extension that runs in user space.
FSKit Module entitlement (Apple docs) --- com.apple.developer.fskit.fsmodule is the entitlement that indicates an extension provides an FSKit filesystem (i.e., without it you're not "an FSKit filesystem extension" in the eyes of the OS).
System Extension install entitlement (Apple docs) --- com.apple.developer.system-extension.install is the entitlement that allows a host app to activate/deactivate system extensions (the general mechanism used to get these kinds of extensions loaded/managed on macOS).
WWDC statement about extension sandboxing --- Apple describes extension code being isolated into its own daemon process that's sandboxed (this
RHEL does not include qemu-user-static, consider alternatives.
sudo apt update
sudo apt install qemu qemu-kvm libvirt-daemon-system libvirt-clients bridge-utils cpu-checker \
network-manager iptables-persistent linux-headers-generic \
qemu uml-utilities virt-manager git \
wget libguestfs-tools p7zip-full make dmg2img tesseract-ocr \
tesseract-ocr-eng genisoimage vim net-tools screen firewalld libncurses-dev -y
sudo apt install virt-manager
sudo addgroup kvm
| #include <stdio.h> | |
| #include <string.h> | |
| #include <sys/types.h> | |
| #include <unistd.h> | |
| #include <Security/Security.h> | |
| // Compile with: | |
| // gcc -o ourpath -framework CoreFoundation -framework Security main.c |
Guide updated to use the official installation .iso from Microsoft, which finally became available in Dec. 2024! For the VHDX disk image based guide check an earlier version of this gist.
When following this guide on a host not capable of aarch64 virtualization, replace -cpu host -accel kvm with -cpu max.
qemu-img create -f qcow2 win11.qcow2 25G
| #!/usr/bin/env bash | |
| # virtualapple-utm-link | |
| # Karen/あけみ (akemin_dayo) | |
| # https://gist.github.com/akemin-dayo/8337d8274deddfefae5d1543420ca0b1.git | |
| # This is a cleaned up version of an internal script that I've been using while working on TotalFinder to create VirtualApple virtual machine instances that are hardlinked to a UTM virtual machine instance. | |
| # It's particularly useful for entering One True recoveryOS (1TR) as well as using the other features found only in VirtualApple. | |
| # UTM does not support entering 1TR for macOS 12 hosts (yet?), though it is now possible on macOS 13 hosts (utmapp/UTM/issues/3526). |